AQA • PCNSA

Which two actions are available for antivirus security profiles? (Choose two.) A. continue B. allow C. block IP D. alert - B. allow D. alert Which two HTTP Header Logging options are within a URL filtering profile? (Choose two.) A. User‐Agent B. Safe Search C. URL redirection D. X‐Forward‐For - A. User‐Agent D. X‐Forward‐For What are the two components of Denial‐of‐Service Protection? (Choose two.) A. zone protection profile B. DoS protection profile and policy rule...

security zone - group networks that contain particular types of traffic that are contained within defined security classifications Intrazone traffic - allows traffic to flow between interfaces that exist in the same zone Interzone traffic - denies traffic from flowing between interfaces that exist in different zones Security policy rules - are applied to zones (not interfaces) to allow or deny traffic, apply QoS, perform NAT, apply security profiles, or set logging parameters. primary zone...

Which Palo Alto Networks firewall security platform provides network security for mobile endpoints by inspecting traffic deployment as internet gateways? - Global Protect Which statement is true regarding a Prevention Posture Assessment? - It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture. Which fiver Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to preve...

Palo Alto Networks Security Operating Platform Components - Network Security Advanced Endpoint Protection Cloud Security Cloud-Delivered Security Services Application Framework and Logging Service Palo Alto Networks Apps, Third-Party Apps and Customer Apps Next Gen Firewall Availability - Physical appliances Virtualized appliances Cloud-delivered services/GlobalProtect Detection - Detect known and unknown attacks Attacks in encrypted traffic Use intelligence from customer deployments ...

Palo Alto Networks Security Operating Platform Components - Network Security Advanced Endpoint Protection Cloud Security Cloud-Delivered Security Services Application Framework and Logging Service Palo Alto Networks Apps, Third-Party Apps and Customer Apps Next Gen Firewall Availability - Physical appliances Virtualized appliances Cloud-delivered services/GlobalProtect Detection - Detect known and unknown attacks Attacks in encrypted traffic Use intelligence from customer deployments ...

The Palo Alto Networks Security Operating Platform is designed for which three purposes? (Choose three.) A. consume innovations quickly B. ensure compliance C. focus on what matters D. prevent successful cyberattacks - A. consume innovations quickly C. focus on what matters D. prevent successful cyberattacks Which item is not one of the six primary components of the Palo Alto Networks Security Operating Platform A. Applications (Palo Alto Networks apps, third-party apps, customer apps)...

What will be the result of one or more occurrences of shadowing? - A warning Which column in the Applications and Threats screen includes the options Review Apps and Review Policies? - Action Which link can you select in the web interface to minimize the risk of installing new App-ID updates? - Disable new apps in content update. Which two protocols are implicitly allowed when you select the facebook-base application? (Choose two.) - Web-browsing SSL What are the two default (predefined...

Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping. What is the quickest way to reset the hit counter to zero in all the security policy rules? A. At the CLI enter the command reset rules and press Enter B. Highlight a rule and use the Reset Rule Hit Counter > Selected Rules for each rule C. Reboot the firewall D. Use the Reset Rule Hit Counter>All Rules option - D. Use the Reset Rule Hit Counter > Al...

Default Antivirus Profile protocols - -smtp -smb -ftp -imap -pop3 -http/2 Antivirus profile actions - -allow -allert (Default) -drop -reset client -reset server -reset both Rule Usage tab in Security Policy Rule displays the rule's usage, what four important information you will find in Rule Usage tab? - -Basics -Applications -Activity -Traffic A Virtual Wire object is capable of blocking or allowing traffic based on? - 802.1Q VLAN tag values When new applications are added to...

Default Antivirus Profile protocols - -smtp -smb -ftp -imap -pop3 -http/2 Antivirus profile actions - -allow -allert (Default) -drop -reset client -reset server -reset both Rule Usage tab in Security Policy Rule displays the rule's usage, what four important information you will find in Rule Usage tab? - -Basics -Applications -Activity -Traffic A Virtual Wire object is capable of blocking or allowing traffic based on? - 802.1Q VLAN tag values When new applications are added to...

VM-Series firewalls starting with PAN-OS version 8.0, the MGT port is configured with? - IP address DHCP What configuration is the actual configuration which controls the firewall operation? Service XML Candidate Running - Running A network engineer clicks "Save candidate configuration" to save the configuration to memory to finish the configuration later. After the engineer continues editing and click "Save candidate configuration" again, the configuration that is saved in memory ...

1. The Palo Alto Networks Cybersecurity Portfolio focuses on which three principle technologies? (Choose three.) A. securing operations response B. securing the enterprise C. securing third-party application access D. securing the cloud E. securing the internet of things - ABD 2. What are four components of the Palo Alto Networks Cybersecurity Portfolio? (Choose four.) A. Cortex DynamicDNS B. Wildfire C. Cortex XDR D. OpenConnect E. Prisma Access F. Autofocus - BCEF 3. Which cloud-...

What is an "application shift?" 1. an application change during the lifetime of a session 2. a session change during the lifetime of an application 3. a packet change during the lifetime of a session 4. application dependency - an application change during the lifetime of a session What is the default metric value of static routes? +1 1 2 10 20 - 10 How often are new antivirus signatures published? hourly weekly daily monthly - Daily Which interface type can be used to switch t...

Palo Alto NGFWs enable you to adopt security best practices to minimize opportunities for attack by using the following *three* policy types... - Application, User, and Content based policies. T/F: Palo Alto NGFWs allow you to automate workflows via integration with administrative tools such as ticketing services, or any system with a RESTful API. - True What are the *three* families of Palo Alto NGFWs? - 1) VM Series 2) Prisma Access (Cloud Firewall SaaS) 3) Physical Firewalls Name at l...

The control plane provides which two managment feature of the firewall? - reporting firewall configuration A virtual wire interface that receives a frame or packet ignores any Layer 2 or layer 3 addresses for switching or routing purposes? - True how often are new anti-virus signatures published? - daily what does palo alto networks use to regularly post updates for application detection, threat protection, and GlobalProtect data files? - dynamic updates which layer 2 interfaces used to s...

Threat Intelligence Cloud - Identifies and inspects all traffic to block known threats. Next Generation Firewall - Gathers, analyzes, correlates, and disseminates threats to and from network endpoints Advanced Endpoint Detection - Inspects processes and files to prevent known and unknown exploits Which firewall plane provides configuration, logging, and reporting functions on a separate processor? A. control B. network processing C. data D. security processing - A. Control A security a...

What are two firewall management methods? - CLI XML API Which two devices are used to connect a computer to the firewall for management purposes? - Serial cable RJ-45 Ethernet cable What is the default IP address assigned to the MGT interfaces of a Palo Alto Networks firewall? - 192.168.1.1 What are the two default services that are available on the MGT interface? - HTTPS SSH True or false? Service route traffic has Security policy rules applied against it - True Service routes may b...

Content-ID feature - includes a threat prevention engine and policies to inspect and control content traversing the firewall Security Profiles - objects that are added to security policy rules configured with an action of "allow"... represent additional security checks to be performed on allowed network traffic Antivirus Profile - Detects infected files being transferred with the application Anti-spyware profile - detects spyware downloads and traffic from already installed spyware Vulne...

The Palo Alto Networks Cybersecurity Portfolio focuses on which three principle technologies? - Securing the operations response Securing the enterprise Securing the cloud What are four components of the Palo Alto Networks Cybersecurity Portfolio? - WildFire Cortex XDR Prisma Access AutoFocus Which cloud-delivered security service provides instant access to community-based threat data? - AutoFocus Which cloud-delivered security service provides security and connectivity for branches ...

Which type of administrator account cannot be used to authenticate user traffic flowing through the firewall's data plane? - SAML user Starting with PAN-OS version 9.1 which new type of object is supported for use within the User field of a Security policy rule? - Dynamic user group Which link in the web interface enables a security administrator to view the Security policy rules that match new application signatures? - Review Apps Which type of firewall configuration contains in-progress...